Cov neeg tsim tawm ntawm OpenBSD qhov project tau nthuav tawm qhov kev tso tawm ntawm ib qho portable tsab ntawm LibreSSL 3.7.0 pob, nyob rau hauv uas lub diav rawg ntawm OpenSSL tau tsim, tsom rau kev muab kev ruaj ntseg ntau dua. Txoj haujlwm LibreSSL tau tsom mus rau kev txhawb nqa zoo rau SSL / TLS raws tu qauv los ntawm kev tshem tawm cov haujlwm tsis tsim nyog, ntxiv cov yam ntxwv kev ruaj ntseg ntxiv, thiab ua kom huv thiab rov ua haujlwm ntawm lub hauv paus code. LibreSSL 3.7.0 yog suav tias yog qhov kev sim tso tawm uas tsim cov yam ntxwv uas yuav suav nrog hauv OpenBSD 7.3.
Nta ntawm LibreSSL 3.7.0:
- Ntxiv kev txhawb nqa rau Ed25519 pej xeem cov npe digital kos npe tsim los ntawm Daniel Bernstein thiab raws li Curve25519 elliptic nkhaus thiab SHA-512 hash. Ed25519 kev txhawb nqa muaj nyob rau hauv ob qho tib si hauv daim ntawv ntawm kev sib cais thawj zaug thiab los ntawm EVP interface.
- EVP interface tau ntxiv kev txhawb nqa rau X25519 cov kos npe digital, uas txawv ntawm Ed25519 kos npe los ntawm kev siv tsuas yog "X" kev tswj hwm thaum tswj cov ntsiab lus ntawm qhov nkhaus elliptic, uas tuaj yeem txo qis tus lej code yuav tsum tau tsim thiab txheeb xyuas cov npe kos npe.
- API qib qis rau kev ua haujlwm nrog pej xeem thiab ntiag tug cov yuam sij, sib xws nrog OpenSSL 1.1, tau ua tiav, txhawb nqa cov yuam sij EVP_PKEY_ED25519, EVP_PKEY_HMAC thiab EVP_PKEY_X25519.
- Hloov chaw ua haujlwm timegm() thiab gmtime(), POSIX ua haujlwm los ntawm BoringSSL yog siv los hloov hnub.
- Lub tsev qiv ntawv BN (BigNum) tau ntxuav cov lej qub thiab tsis siv uas ua haujlwm nrog cov lej tseem ceeb.
- Tshem tawm kev txhawb nqa rau HMAC PRIVATE KEY.
- Reworked internal code rau tsim thiab txheeb xyuas DSA kos npe.
- Cov cai rau xa tawm cov yuam sij rau TLSv1.2 tau rov sau dua.
- Cov qub TLS pawg tau raug ntxuav thiab rov ua haujlwm dua.
- Tus cwj pwm ntawm BIO_read() thiab BIO_write() ua haujlwm ze rau OpenSSL 3.]
Tau qhov twg los: opennet.ru